10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.1%
Integer underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application.
CPE | Name | Operator | Version |
---|---|---|---|
apple:tvos | apple tvos | le | 6.1.1 |
apple:tvos | apple tvos | eq | 6.0 |
apple:tvos | apple tvos | eq | 6.0.1 |
apple:tvos | apple tvos | eq | 6.0.2 |
apple:tvos | apple tvos | eq | 6.1 |
archives.neohapsis.com/archives/bugtraq/2014-06/0172.html
archives.neohapsis.com/archives/bugtraq/2014-06/0174.html
archives.neohapsis.com/archives/bugtraq/2014-06/0175.html
packetstormsecurity.com/files/167630/launchd-Heap-Corruption.html
secunia.com/advisories/59475
support.apple.com/kb/HT6296
www.securitytracker.com/id/1030500